Malicious forks of the Baileys WhatsApp Web library published to npm, including the wave OX Security tracks as PhantomSub. The forks abuse the installer's authenticated WhatsApp session to silently follow attacker-controlled WhatsApp channels, using channel IDs that are hardcoded, base64-encoded, or fetched at runtime from attacker-controlled lists on GitHub. Some forks also inject the author's advertising URL into outgoing media, forge channel attribution on the victim's outgoing messages, and in one case send a message from the installer's account and then block the bot. 164 package names are affected; the upstream baileys library is not compromised.